A newly demonstrated “Bring Your Own EDR” attack can turn a legitimate SentinelOne endpoint agent into a privileged Trojan horse on Windows. Documented by Akamai, the technique abuses exposed administrative interfaces and trust relationships within the EDR stack to access Protected Process Light (PPL) processes and to execute unsigned code without a kernel exploit or […]
The post Bring Your Own EDR Attack Weaponizes SentinelOne to Bypass Windows Security appeared first on Cyber Security News.